Cross-site Scripting (XSS)

2018-03-2302:20:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

34.2%

JSON

rails-html-sanitizer is vulnerable to cross-site scripting (XSS) attacks. Attackers can use non-whiltelisted attributes within sanitized output to inject and execute arbitrary webscript.

CPENameOperatorVersion
rails-html-sanitizerle1.0.3
python-psutileq5.0.1__2.el7rhgs
python-psutileq1.2.1__1.el7
python-psutileq5.2.2__2.el7ost
python-psutileq5.0.1__2.el7ost
python-psutileq5.0.1__1.el7sat
ovirt-ansible-vm-infraeq1.1.9__1.el7ev
ovirt-ansible-vm-infraeq1.1.7__1.el7ev
ovirt-ansible-vm-infraeq1.1.8__1.el7ev
erlangeqR16B__03.7min.1.el7ost

Name	Operator	Version
rails-html-sanitizer	le	1.0.3
python-psutil	eq	5.0.1__2.el7rhgs
python-psutil	eq	1.2.1__1.el7
python-psutil	eq	5.2.2__2.el7ost
python-psutil	eq	5.0.1__2.el7ost
python-psutil	eq	5.0.1__1.el7sat
ovirt-ansible-vm-infra	eq	1.1.9__1.el7ev
ovirt-ansible-vm-infra	eq	1.1.7__1.el7ev
ovirt-ansible-vm-infra	eq	1.1.8__1.el7ev
erlang	eq	R16B__03.7min.1.el7ost